Skip to end of metadata
Go to start of metadata

You are viewing an old version of this page. View the current version.

Compare with Current View Page History

« Previous Version 4 Next »

Using the default Self-Elevation, applications are launched with administrator rights after a justification is given. The following steps will allow a user to request elevation, but not add administrator rights to the application.

  • Right-click Justify Application Elevation Message (Policies > Arellia > Application Control > Actions > Messages > Advanced) and select Clone
  • Right-click the cloned message and select View as XML
  • Click Edit
  • Navigate to <terminateExitCode>100</terminateExitCode> and change the 100 to 0
  • Then select Import at the bottom of the XML Viewer
  • Next navigate to the User Requested Elevation Justification Policy
  • Change the Application Actions to the clone of the Justify Application Elevation Message and also leave the Add Administrator Rights
  • These requests will then be viewable in the Event Summary and Acknowledgement Viewer.

Doing the above steps will allow Arellia Application Control to work correctly but will not continue adding administrative rights to a program after a justification is given because the terminateExitCode change from 100 to 0.

  • No labels